CVE-2020-6627

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-12-06 · updated 2026-06-17
Weakness: CWE-78

Description

The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in cirrus/application/helpers/mv_backend_helper.php by leveraging the "start" state and sending a check_device_name request.

Affected products

Seagate Stcg2000300 Firmware: all versions
Seagate Stcg3000300 Firmware: all versions
Seagate Stcg4000300 Firmware: all versions

References

http://packetstormsecurity.com/files/172590/Seagate-Central-Storage-2015.0916-User-Creation-Command-Execution.html
https://github.com/rapid7/metasploit-framework/pull/12844
https://pentest.blog/advisory-seagate-central-storage-remote-code-execution/
https://www.invictuseurope.com/blog/
http://packetstormsecurity.com/files/172590/Seagate-Central-Storage-2015.0916-User-Creation-Command-Execution.html
https://github.com/rapid7/metasploit-framework/pull/12844
https://pentest.blog/advisory-seagate-central-storage-remote-code-execution/
https://www.invictuseurope.com/blog/

Get alerted when CVE-2020-6627 or the next vulnerability affects your stack